Merge pull request #280281 from niklarin/cpg-md5

FIPS-MD5 docs update

Author: prmerger-automator[bot]

articles/cosmos-db/postgresql/product-updates.md

@@ -7,7 +7,7 @@ ms.custom: mvc, references_regions
 ms.service: cosmos-db
 ms.subservice: postgresql
 ms.topic: conceptual
-ms.date: 05/28/2024
+ms.date: 07/07/2024
 ---
 
 # Product updates for Azure Cosmos DB for PostgreSQL
@@ -22,6 +22,9 @@ Updates that don’t directly affect the internals of a cluster are rolled out g
 
 Updates that change cluster internals, such as installing a [new minor PostgreSQL version](https://www.postgresql.org/developer/roadmap/), are delivered to existing clusters as part of the next [scheduled maintenance](concepts-maintenance.md) event. Such updates are available immediately to newly created clusters.
 
+### July 2024
+* [MD5 hashing is disabled](./reference-limits.md#security) in Azure Cosmos DB for PostgreSQL.
+
 ### May 2024
 * General availability: [The latest minor PostgreSQL version updates](reference-versions.md#postgresql-versions) (12.19, 13.15, 14.12, 15.7, and 16.3) are now available.
     * [The last update for PostgreSQL 11](./reference-versions.md#postgresql-version-11-and-older) was released by community in November 2023.

articles/cosmos-db/postgresql/reference-limits.md

@@ -6,7 +6,7 @@ author: niklarin
 ms.service: cosmos-db
 ms.subservice: postgresql
 ms.topic: conceptual
-ms.date: 01/28/2024
+ms.date: 07/07/2024
 ---
 
 # Azure Cosmos DB for PostgreSQL limits and limitations
@@ -87,12 +87,22 @@ In Azure Cosmos DB for PostgreSQL clusters with [burstable compute](concepts-bur
 <a name='azure-active-directory-authentication'></a>
 
 ### Microsoft Entra ID authentication
+
 If [Microsoft Entra ID](./concepts-authentication.md#azure-active-directory-authentication-preview) is enabled on an Azure Cosmos DB for PostgreSQL cluster, the following is currently **not supported**:
 
 * PostgreSQL 11, 12, and 13
 * Microsoft Entra groups
 
-### Database creation
+## Security
+
+MD5 hashing is disabled in Azure Cosmos DB for PostgreSQL and impacts the following areas:
+* Native Postgres passwords are hashed using SCRAM-SHA-256 method only.
+* [pgcrypto extension](https://www.postgresql.org/docs/current/static/pgcrypto.html): MD5 isn't available as a hashing method.
+* [uuid-ossp extension](https://www.postgresql.org/docs/current/static/uuid-ossp.html): MD5 isn't available as a hashing method.
+* Built-in Postgres functions. For instance,  SELECT md5(‘your_string’);
+* Custom functions such as custom functions in PL/pgSQL that use MD5 hashing.
+
+## Database creation
 
 The Azure portal provides credentials to connect to exactly one database per cluster. Creating another database is currently not allowed, and the CREATE DATABASE command fails with an error.